Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.mft
File: JJkvMtdIbftKMsLngQhUrGpmjjQ.mft (raw, json)
Hash identifier: l3ZPe30g2+rpf4HE7I7gkSAOnw2L97HEJls0V82myLw=
Subject key identifier: 66:25:63:E9:A1:ED:57:3C:1B:57:D5:E9:CF:4E:58:A1:68:63:42:8A
Authority key identifier: 24:99:2F:32:D7:48:6D:FB:4A:32:C2:E7:81:08:54:AC:6A:66:8E:34
Certificate issuer: /CN=24992f32d7486dfb4a32c2e7810854ac6a668e34
Certificate serial: 0194BD175FB325638920400349622A812C0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JJkvMtdIbftKMsLngQhUrGpmjjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.mft
Manifest number: 0720
Signing time: Fri 31 Jan 2025 16:00:13 +0000
Manifest this update: Fri 31 Jan 2025 16:00:13 +0000
Manifest next update: Sat 01 Feb 2025 16:00:13 +0000
Files and hashes: 1: JJkvMtdIbftKMsLngQhUrGpmjjQ.crl (hash: /H7banbju8ZAp/vpMe2Hi+aLS90824c64c+W7POI5WY=)
2: SvgtOmag1Ed_NFITsp_g8SM3OYs.roa (hash: CvglQLYhu3pHLDYJxUoGcvgzwDqOLBBqoRW5UuJHkAM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:5f:b3:25:63:89:20:40:03:49:62:2a:81:2c:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24992f32d7486dfb4a32c2e7810854ac6a668e34
Validity
Not Before: Jan 31 16:00:13 2025 GMT
Not After : Feb 1 16:00:13 2025 GMT
Subject: CN=662563e9a1ed573c1b57d5e9cf4e58a16863428a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0a:23:60:61:56:b1:68:46:99:37:e5:ce:0c:
0f:ed:23:79:b9:ac:2f:af:83:4a:f7:17:ff:7c:a2:
ee:0e:ed:c8:77:5b:f8:7c:a3:68:8b:4e:6c:c5:f2:
4d:d5:71:46:2e:c5:87:e4:ea:2b:44:24:62:d1:9a:
5e:43:0a:fb:6e:c6:5f:73:68:aa:e9:d5:2f:b5:f6:
05:16:8b:0a:bb:0b:c0:ca:44:ff:06:86:0d:42:14:
48:56:de:91:72:24:86:95:07:4f:30:ad:b2:12:bb:
c2:8a:69:39:1f:6d:20:2b:84:f2:71:03:81:96:d2:
f2:67:0b:d9:c8:43:60:63:40:c2:0b:89:d3:29:12:
b3:46:56:87:0a:f0:53:ba:9b:fd:57:66:36:44:84:
ba:02:e9:13:b1:39:d7:bd:ef:8b:3f:55:2f:4d:fd:
80:f5:48:5e:d9:bb:bf:1d:0d:0b:2b:3c:05:96:d2:
4a:17:42:6b:21:92:2a:fe:13:f3:e2:6e:45:42:13:
68:2b:1e:d3:34:bc:34:8f:e8:23:d5:a6:6b:ae:7a:
02:e0:a2:cd:c9:a5:c5:38:07:5f:f4:3e:1e:3b:a3:
60:0d:7e:9e:d6:29:76:52:05:32:ba:1b:5a:b7:3d:
97:a2:f5:6a:ef:75:98:14:c6:af:bd:52:c0:69:99:
d8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:25:63:E9:A1:ED:57:3C:1B:57:D5:E9:CF:4E:58:A1:68:63:42:8A
X509v3 Authority Key Identifier:
keyid:24:99:2F:32:D7:48:6D:FB:4A:32:C2:E7:81:08:54:AC:6A:66:8E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JJkvMtdIbftKMsLngQhUrGpmjjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:3e:db:41:db:7e:e2:77:d9:9e:6d:42:db:7d:68:f7:ad:31:
58:b1:17:ef:99:4f:7b:ef:3d:1d:9a:18:84:d4:6f:61:db:0d:
aa:6a:01:ae:94:76:97:4a:3e:d8:af:ea:7c:4e:67:0c:e4:28:
5e:49:f4:99:c2:4f:18:50:ac:71:da:91:18:85:f7:84:69:85:
c4:21:f0:ce:56:06:d8:ff:e3:40:1a:8b:b9:58:3f:42:d4:bf:
22:cc:bf:25:95:41:51:1a:37:8c:32:c3:d6:aa:a3:48:b1:61:
b9:2e:9f:e2:b7:5b:57:f1:8c:64:76:e9:bd:e2:23:b2:7e:27:
af:bb:65:d4:43:a9:9b:24:de:4b:a8:7b:c2:b7:9b:df:37:d2:
c9:67:61:2e:d1:7b:0d:51:84:63:5b:0b:88:08:34:b9:b0:e1:
e5:54:86:d6:a7:9f:e6:28:a6:0c:8f:6a:c2:b5:4c:f1:c0:c2:
e6:6b:09:8d:1a:7a:4e:4c:a5:93:f7:51:e9:03:ad:f4:8b:44:
45:06:3e:30:ee:ef:37:12:e5:53:e5:7a:21:19:ef:c7:96:f1:
09:b2:83:bd:4b:f8:31:5d:78:e6:86:20:c8:c2:de:62:0b:86:
c2:3b:b5:dd:fa:6b:ef:b5:08:e4:d7:eb:b3:c4:34:0a:33:cc:
bf:29:43:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 14:27:23 2025 by rpki-client